To be fair, if this happens server-side then they can just preload all remote content at delivery time, negating the privacy impact of trackers because the only data they'll get is the IP/user agent of the email server.

Jason Fried in the demo says that they do precisely this – they act as a proxy.

Strip all params, hope for the best?